Malicious code in postcss-loader-meteor-mocha-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9699c8ecd92c1240dc7e25526a80075be5719ff985bf60dafafc2ecb9a7ab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private-install-radiant-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e53c3db67dc50d23af922b8b66d3017fe1f3bb7845987f6c590cf7c7b42b827 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic-release-google-warp-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector befc3050b341d286101261fec11b2cb358d3994e132344a3ffd96727445879e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-typeorm-ursa-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbaeeabd6ac963216968ece8cff8b5e1740bff68ee18b990b5ac749e299434e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-nebula-vulcan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3fb43d337f3d549421664d53fe2d3de498727cee05007b2f16093d683b6bff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-private-ophiuchus-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3405904445531c7ae1d5711a260447cb6f598d121e2ca8ffcffe1a2aa7713f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in morgan-uglify-js-resolvers-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5cb0db225d6809f534a14885e444e93e9cc389a848bf65f9442aae866673ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142422 Malicious code in farout-redis-levels-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4808d63fabbd9b447cdda5786ef87da4c11c3ccfba1d820b6fa9165fdd0c9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147270 Malicious code in repository-loglevel-node-config-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf96d6999bdbe58b3534415e7f4e8060c45e943b0be6ff42b6a86c767f282ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144200 Malicious code in koa-polaris-wasat-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9308af0ff31c5ddc4d9944685391f62a5939f3e0541b0893d3901030490ff181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145418 Malicious code in nextjs-mdx-auriga-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca8c8af77a53c752e008d04598c3a743e029cb6de2fbfc1fddf4e8fab527da81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145016 Malicious code in mira-polaris-forever-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9839ca6c0ed2a3abb6097d7ab67e407b1aa3ab53b40751672e7c85aeabc8394a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140690 Malicious code in changelog-upgrade-native-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d985c3ae2349fb80095178ca8c1c3d0e0171ce3f14382f0bb8265bbfd705918e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144326 Malicious code in less-loader-pino-dotenv-safe-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af76f40a9ef37626c42f5c3ea2f4de40317e8fd209c2822c63c0123bdf79ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140147 Malicious code in browserify-xanadu-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf298ca186ab3969a5603ad79104ed7279f19d3e7e8a594f747ecf71c495d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142325 Malicious code in event-spica-gridsome-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f0c6290eac850e1d6c4cb0fc81023c3fbee17e9f5b5395d1c16f9dc4ec4e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148449 Malicious code in tailwindcss-oberon-fusion-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 232e75b055fc6230a800b89b059a9525beee5af58139c6d0f9ac05f8229b7a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142198 Malicious code in eslint-config-event-convict-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f446aaf24a37aca04db5c7b3b7a5018dd7160c69c812dba273d37e7bfc1a947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143977 Malicious code in json-nashira-kinetic-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc765289a745bfa7fb547425100b136323a1de12b213766030bab7718297c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...